An issue was disocvered in wuzhicms version 4.1.0, allows remote attackers to execte arbitrary code via the setting parameter to the ueditor in index.php

An issue in WUZHI CMS v.4.1.0 allows a remote attacker to execute arbitrary code via the set_chache method of the function\common.func.php file

Wuzhi CMS v4.1.0 contains a remote code execution (RCE) vulnerability in \attachment\admin\index.php

Blacklist bypass issue exists in WUZHI CMS up to and including 4.1.0 in common.func.php, which when uploaded can cause remote code executiong

An issue was discovered in WUZHI CMS 4.1.0

An issue was discovered in WUZHI CMS 4.1.0

An issue was discovered in WUZHI CMS 4.1.0

index.php?m=member&v=pw_reset in WUZHI CMS 4.1.0 allows CSRF to change the password of a common member

An issue was discovered in WUZHI CMS 4.1.0

An issue was discovered in WUZHI CMS 4.1.0

Beijing Wuzhi Internet Technology Co., Ltd

Arbitrary file deletion vulnerability was discovered in wuzhicms v 4.0.1 via coreframe\app\attachment\admin\index.php, which allows attackers to access sensitive information

SQL Injection in Wuzhi CMS v4.1.0 allows remote attackers to obtain sensitive information via the 'flag' parameter in the component '/coreframe/app/order/admin/index.php'

WuzhiCMS Remote Image Fetch index.php saveRemote server-side request forgery

WuzhiCMS index.php getDataOfJson sql injection

WuzhiCMS Setting index.php set code injection

wuzhicms block.php edit code injection

An issue was discovered in WUZHI CMS 4.1.0